$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c1303d9a-12f1-341c-a245-174e0899d520.roa File: c1303d9a-12f1-341c-a245-174e0899d520.roa (raw, json) Hash identifier: s+wtkGuMHPuexCwDZU8BL3s4wTnxoEL/T5LPqhmWUC0= Subject key identifier: 37:82:7A:AE:CF:07:63:A1:EC:09:22:9F:81:DF:26:3B:E1:AD:34:D2 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF5CB9B30A49268CFA27C0 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c1303d9a-12f1-341c-a245-174e0899d520.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397223 IP address blocks: 156.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:5c:b9:b3:0a:49:26:8c:fa:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=04990ad8-c921-49a2-a8a1-70717a108dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3b:2a:db:5f:dd:f7:3b:28:4d:a2:31:90:cb: 11:69:f3:27:05:b8:dd:88:1b:04:f4:ac:75:d6:e6: 01:6d:6c:e0:4d:65:b8:ae:14:9e:b8:af:2e:f6:eb: 45:33:8e:dc:e6:7e:61:55:bb:14:55:e5:49:bc:77: 26:30:99:42:1e:44:d9:ea:92:48:9b:b5:75:a8:9b: 36:c5:38:da:b5:cb:f6:5e:71:79:9e:10:2e:3a:a9: d1:fd:da:46:20:c6:47:be:e1:f6:69:ea:39:18:a5: 38:44:c0:9a:51:b8:d6:46:bf:09:46:f5:d7:fa:31: 4a:b5:93:41:74:24:4d:c8:99:d0:9c:10:ec:a6:f3: dc:87:a3:b7:b0:74:f7:81:1a:0c:17:15:6e:3d:f9: 42:91:15:7d:09:e6:35:1f:54:48:b4:b0:da:9a:fe: 37:ad:ed:e1:e6:ec:ee:5c:1d:bd:17:02:d1:72:27: a7:87:fd:47:fa:66:ae:eb:c3:a2:a2:a4:7d:d4:11: 94:39:c6:6f:67:ad:12:c3:a6:e1:15:d2:38:f4:02: 26:c5:06:86:ac:10:71:38:07:7a:24:c0:93:53:64: f2:14:ee:f7:77:ae:8f:3b:39:e4:ec:ad:ef:35:fc: 31:9b:08:be:76:75:10:2c:65:25:5b:13:96:64:6a: 49:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:82:7A:AE:CF:07:63:A1:EC:09:22:9F:81:DF:26:3B:E1:AD:34:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c1303d9a-12f1-341c-a245-174e0899d520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:e1:03:7c:5a:24:43:56:b1:a4:30:cf:de:ee:05:42:ff:23: 8e:80:8a:bc:16:51:97:90:b3:39:16:78:82:f1:b3:cd:82:92: 56:f0:dd:4f:72:3f:f4:02:51:15:26:b8:14:55:86:4d:fb:14: e4:62:de:7f:26:ef:e1:5a:db:db:01:0c:58:37:50:e0:76:3b: 73:a7:e9:24:ed:42:78:c6:f3:75:e9:2e:c2:6f:f8:f3:2c:57: b0:1f:b5:79:a8:c5:fb:14:92:d8:56:e1:1d:9c:0b:63:da:99: 85:15:1a:38:7b:29:09:25:f5:1d:3b:5e:49:6d:67:6b:52:b5: 97:71:2d:68:aa:e0:7c:0d:01:21:33:df:4d:20:1c:ca:65:7d: 10:3b:91:29:0d:e1:af:f4:57:be:c8:78:5f:7e:93:97:71:b4: e0:0b:46:12:04:64:3b:1a:98:7d:cd:0d:42:e2:e0:aa:92:83: 1d:a1:55:4a:09:b2:32:16:d1:71:2c:78:ef:5e:5b:e7:a5:5a: d8:6f:bc:98:81:40:d3:19:59:2b:00:64:37:ce:a1:03:4b:9e: 48:fa:a4:ac:df:df:3d:65:6f:73:0b:29:ee:c9:2f:cd:f7:dd: a1:76:dc:ce:23:cc:8b:a0:c4:22:53:60:f2:e7:d6:33:e2:46: 56:b9:f4:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz1y5swpJJoz6J8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MDQ5OTBhZDgtYzkyMS00OWEyLWE4YTEtNzA3MTdhMTA4ZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zsq21/d9zsoTaIxkMsRafMnBbjdiBsE9Kx1 1uYBbWzgTWW4rhSeuK8u9utFM47c5n5hVbsUVeVJvHcmMJlCHkTZ6pJIm7V1qJs2 xTjatcv2XnF5nhAuOqnR/dpGIMZHvuH2aeo5GKU4RMCaUbjWRr8JRvXX+jFKtZNB dCRNyJnQnBDspvPch6O3sHT3gRoMFxVuPflCkRV9CeY1H1RItLDamv43re3h5uzu XB29FwLRcienh/1H+mau68OioqR91BGUOcZvZ60Sw6bhFdI49AImxQaGrBBxOAd6 JMCTU2TyFO73d66POznk7K3vNfwxmwi+dnUQLGUlWxOWZGpJ6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeCeq7PB2Oh7Akin4HfJjvhrTTSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYzEzMDNkOWEtMTJmMS0z NDFjLWEyNDUtMTc0ZTA4OTlkNTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7hA3xaJENWsaQwz97uBUL/I46AirwWUZeQszkWeILxs82Cklbw3U9y P/QCURUmuBRVhk37FORi3n8m7+Fa29sBDFg3UOB2O3On6STtQnjG83XpLsJv+PMs V7AftXmoxfsUkthW4R2cC2PamYUVGjh7KQkl9R07XkltZ2tStZdxLWiq4HwNASEz 300gHMplfRA7kSkN4a/0V77IeF9+k5dxtOALRhIEZDsamH3NDULi4KqSgx2hVUoJ sjIW0XEseO9eW+elWthvvJiBQNMZWSsAZDfOoQNLnkj6pKzf3z1lb3MLKe7JL833 3aF23M4jzIugxCJTYPLn1jPiRla59Go= -----END CERTIFICATE-----Generated at Sat Apr 26 16:24:34 2025 by rpki-client